The first RC build for the FreeBSD-10.0 release cycle is now available. ISO images for the amd64, i386, ia64, powerpc, powerpc64 and sparc64 architectures are available on most of our FreeBSD mirror sites. (via)
A new BSD Now TV episode (Zettabytes for Days – Episode 14) has been uploaded, featuring an interview with George Wilson on OpenZFS.
Other topics discussed are:
- pkgng 1.2 released
- ChaCha20 and Poly1305 in OpenSSH
- Is it time to dump Linux and move to BSD
- OpenZFS devsummit videos
- Interview – George Wilson
- A crash course on ZFS
- ruBSD 2013 information
- DragonFly roadmap, post 3.6
- BSDCan 2014 CFP
- casperd added to -CURRENT
- ZFS corruption bug fixed in -CURRENT
Some of the FreeBSD related videos are:
John Hixson: FreeNAS Plugins everything you ever wanted to know
Kris Moore: Automating the deployment of FreeBSD & PC BSD systems
Michael Dexter: Hands on bhyve, the BSD Hypervisor
Takuya ASADA: Implements BIOS emulation support for BHyVe: A BSD Hypervisor
Davide Italiano: Calloutng: a new infrastructure for timer facilities in the FreeBSD kernel
Glen Barber announced FreeBSD 10.0 Beta 4 on the FreeBSD Stable mailinglist earlier today.
The fourth BETA build for the FreeBSD-10.0 release cycle is now available. ISO images for the amd64, i386, ia64, powerpc, powerpc64 and sparc64 architectures are available on most of our FreeBSD mirror sites.
FreeBSD 10.0 Beta 4 is available for amd64, i386, ia64, PowerPC, PowerPC64, and SPARC64 architectures and can be downloaded here for testing purposes.
FreeBSD 10.0 is running behind the original schedule which was already very optimistic. However, the wait will be worth it as version 10 comes packed with new features. Releasing a properly tested version is far more important than rushing out a half-baked product in order to stick to a release schedule. Three Release Candidates are expected to see the light in December with a 10.0-Release planned for the turn of the year.
Changes between -BETA3 and -BETA4 include:
- Add preliminary support for RTL8106E, RTL8168G, RTL8168GU, RTL8411B, and RTL8168EP.
- Enable fingerprint checking in pkg(8) for FreeBSD-provided binary packages.
- Remove the WITH_LIBICONV_COMPAT build option.
- Update nvi to 2.1.2.
- Various iconv(3) fixes.
- Fix mergemaster -U by forcing FreeBSD 9 compatiblity in mtree when mtree is nmtree.
- Fix to freebsd-update(8) in generating the list of old files/directories versus new files/directories (FreeBSD-EN-13:05.freebsd-update).
We had Black Friday, Cyber Monday, and today is “Giving Tuesday” (3 December). Many charities and open source projects receive most of their donations in December. These donations determine if they can continue to grow in 2014 or whether they have to scale back.
There are many open source projects that deserve and would welcome financial contributions from happy users. One such project, yes you guessed it, is the FreeBSD Project. The FreeBSD Foundation‘s annual fund-raising efforts are essential to keep the development and the running of it going. As the Project grows, so do the costs. By donating to the foundation, you are helping it to start and sponsor new projects, sponsor FreeBSD events and provide travel grants to FreeBSD developers next year.
So far $470,000 has been donated, still a long way off the $1,000,000 target that the Foundation set itself – see the End of Year Fundraising Campaign letter.
If you like to see FreeBSD become even better in 2014, consider making a donation today.
Disclosure: freebsdnews is not affiliated with the FreeBSD Foundation and I have not been asked to post this.
The FreeBSD Foundation has an interview with Reid Linnemann.
Each week we are sharing a story from someone involved in FreeBSD. This is our Faces of FreeBSD series. It may be a story from someone who’s received funding from us to work on development projects, run conferences, travel to conferences, or advocate for FreeBSD. But, it is always from someone who is making a positive difference in the FreeBSD world.
The Ports Management Team has an interview with Thomas Abthorpe, well, Tomas “interviews” Thomas.
A new BSD Now TV episode (Bridging the gap – episode 13) has been uploaded, featuring an interview with Jordan Hubbard, one of the founders of the FreeBSD project – and the one who invented ports!
Other topics discussed are:
- Getting to know your portmgr
- vBSDCon wrap-up compilation
- Faces of FreeBSD
- Dragonfly 3.6 released
- Interview – Jordan Hubbard
- News Roundup
- pfSense 2.1 on AWS EC2
- Puffy on the desktop
- Two-factor authentication with SSH
- PCBSD weekly digest
OpenSSH is an implementation of the SSH protocol suite, providing an encrypted and authenticated transport for a variety of services, including remote shell access.
AES-GCM (Galois/Counter Mode) is a mode of operation for AES block cipher that combines the counter mode of encryption with the Galois mode of authentication which can offer throughput rates for state of the art, high speed communication channels.
OpenSSH supports the AES-GCM algorithm as specified in RFC 5647.
II. Problem Description
A memory corruption vulnerability exists in the post-authentication sshd process when an AES-GCM cipher (firstname.lastname@example.org or email@example.com) is selected during key exchange.
If exploited, this vulnerability might permit code execution with the privileges of the authenticated user, thereby allowing a malicious user with valid credentials to bypass shell or command restrictions placed on their account.
For a workaround and solution, check out the security advisory: FreeBSD-SA-13:14.openssh